All the vulnerabilities related to the version 2.5.9 of the package
Cross Site Scripting vulnerability in store2
Cross Site Scripting vulnerability in nbubna store v.2.14.2 and before allows a remote attacker to execute arbitrary code via the store.deep.js component